Personal sovereign systems lab

EncryptedGuru

A personal systems lab for secure automation, cloud operations, network simulation, and trusted AI workflows.

Production: Cloudflare Pages
Canonical: www.encryptedguru.com
Public surface: Static, no tracking
Last verified: 2026-06-15

Operating thesis

Build systems that remain understandable, portable, and under human control.

EncryptedGuru exists to keep infrastructure understandable under pressure. The lab documents decisions, tests changes before production, minimizes public surface area, and keeps human review in the loop.

Verification loop

Every public claim should have a check.

01 Source

Static assets, redirects, headers, and runbooks are kept in the private source repository.

02 Deploy

Cloudflare Pages builds from the production branch and serves the canonical domain.

03 Verify

Live checks confirm redirect behavior, security headers, sitemap, security.txt, and mail DNS.

04 Recover

Runbooks preserve the exact rollback path for DNS, deployment, mail, and account access.

System pillars

Own the namespace. Verify the path. Keep the system recoverable.

Identity

Domain-based email, account boundaries, recovery paths, and security contacts for durable ownership.

Cloud

Deployable services, logs, storage, monitoring, and automation on real infrastructure.

Network

Private routing, segmentation, simulation, failover thinking, and topology-first design.

Intelligence

AI-assisted workflows that preserve auditability, privacy discipline, and human review.

Current stack

Operational baseline, not a pitch deck.

Google Workspace Identity, admin email, verification, and operational communications.

encryptedguru.com Public namespace for documentation, infrastructure endpoints, and future services.

Google Cloud Runtime layer for deployable tools, APIs, storage, and observability.

Cloudflare Pages Static public hosting, canonical redirects, headers, and production deployment boundary.

NVIDIA DSX Air Network and data center simulation lab before real-world deployment.

Public boundary

Small surface, clear intent.

No tracking No analytics tags, pixels, ad networks, or behavioral profiling on the public site.

No public admin Administrative systems stay off the public surface unless explicitly documented and protected.

Security contact Responsible disclosure is routed through security.txt and a dedicated security mailbox.

Initial notes

Research logs before products.

EncryptedGuru Infrastructure v0.1 Baseline architecture and operating principles Production Verification What is checked after each public change DSX Air Trial Log Network simulation notes and resource discipline NVIDIA DSX Air Trial Plan Topology learning queue and public/private lab boundary Personal Sovereign Network Principles Segmentation, routing, identity, and recovery